Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da636e8c-4d89-3b3b-971d-d9b212de0db2.roa
File:                     da636e8c-4d89-3b3b-971d-d9b212de0db2.roa (raw, json)
Hash identifier:          +MkMjdFyLISvzTAa7DOCZ2Mk6NMVsCzGrkqt96Vtfrc=
Subject key identifier:   0C:71:1F:36:D2:C2:3D:D3:82:B0:9E:FF:0C:1F:F2:45:9B:AE:4A:43
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584D4D5A5E3F18A8A605C1F77510
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da636e8c-4d89-3b3b-971d-d9b212de0db2.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        173.199.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:5e:3f:18:a8:a6:05:c1:f7:75:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=a5fcf6ee-649b-4770-847c-0717fb1270a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:6d:9b:5c:cb:e0:c3:68:2c:75:ce:4e:d4:
                    ad:aa:59:77:61:78:94:76:e2:2f:df:11:69:c3:dd:
                    73:a1:06:64:8c:72:64:67:9e:60:cd:00:cc:e5:1d:
                    90:f6:3e:5b:2b:fd:8a:27:82:71:ca:61:87:de:4b:
                    41:2e:37:3e:05:95:c9:a1:0e:d2:ed:97:3f:a2:d4:
                    dd:d7:35:12:c3:93:56:42:91:a3:32:2f:ce:4c:0c:
                    1c:c6:c5:5a:85:88:7d:f4:e0:17:2d:d8:aa:f1:1a:
                    fb:78:16:1a:0f:74:ae:d7:57:31:84:64:00:78:ff:
                    3f:ae:1c:c8:21:59:0c:c0:23:ff:8c:fa:e6:09:19:
                    e9:99:9b:31:53:ca:80:75:78:1f:2d:d7:c0:f2:c1:
                    84:76:b7:e9:8a:01:bd:ec:90:32:5d:97:45:0b:1e:
                    1b:a5:08:c8:67:02:e6:3f:f6:2b:cb:ef:e7:72:c9:
                    16:de:66:9c:42:44:a6:4a:cc:77:74:d0:54:39:7e:
                    fa:ca:02:9a:3f:da:18:bb:3c:06:7e:9c:ef:32:12:
                    5f:cf:c0:0b:60:2c:0f:3a:bf:42:41:3a:cc:24:85:
                    ed:83:25:cd:aa:d0:03:f9:d4:72:0c:c5:4c:42:62:
                    b3:c4:13:ef:a6:ec:84:a1:a0:39:df:48:03:38:04:
                    fc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:71:1F:36:D2:C2:3D:D3:82:B0:9E:FF:0C:1F:F2:45:9B:AE:4A:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da636e8c-4d89-3b3b-971d-d9b212de0db2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:6f:d1:dd:a1:2b:65:39:c9:30:19:6c:26:81:63:49:5d:ce:
         da:e8:49:80:29:e7:b9:7c:cd:96:52:f4:2a:59:f5:2b:ae:f9:
         c6:cd:21:d8:23:d2:d6:9e:cc:a0:33:63:86:b6:c3:a2:a9:cc:
         fa:6f:4d:c2:d0:58:85:c7:02:0a:eb:6b:ee:88:4a:ab:96:ef:
         6d:92:2a:5d:89:18:ae:f3:26:d1:33:fd:c3:c5:2c:12:8a:2b:
         96:96:6a:85:57:f5:b2:39:9a:63:99:98:13:b4:32:b4:77:4e:
         3d:d8:76:61:58:b9:ae:d2:b7:ae:e2:7a:8f:5d:48:04:f9:1f:
         a6:a3:81:7a:3c:40:85:83:1f:9e:c1:f7:06:2a:6c:a3:99:79:
         39:ca:b6:c3:cc:fc:4f:b7:82:78:70:b7:be:38:39:d9:f7:e1:
         ce:a0:79:9f:5b:fc:01:ac:e1:52:8a:98:0a:45:22:db:66:f7:
         cd:7a:23:d2:1d:a1:ca:8e:03:08:57:92:94:ab:97:fe:b7:87:
         25:59:ea:56:eb:72:80:4e:ad:e0:e9:99:62:e6:a8:91:73:f0:
         1e:60:f9:ca:05:a1:0d:34:11:61:67:e1:a4:d0:b1:4a:85:6a:
         fc:98:85:6b:db:54:73:16:0b:10:44:4d:0c:33:01:28:cf:bc:
         70:70:f4:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWl4/GKimBcH3dRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
YTVmY2Y2ZWUtNjQ5Yi00NzcwLTg0N2MtMDcxN2ZiMTI3MGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAZtm1zL4MNoLHXOTtStqll3YXiUduIv3xFp
w91zoQZkjHJkZ55gzQDM5R2Q9j5bK/2KJ4JxymGH3ktBLjc+BZXJoQ7S7Zc/otTd
1zUSw5NWQpGjMi/OTAwcxsVahYh99OAXLdiq8Rr7eBYaD3Su11cxhGQAeP8/rhzI
IVkMwCP/jPrmCRnpmZsxU8qAdXgfLdfA8sGEdrfpigG97JAyXZdFCx4bpQjIZwLm
P/Yry+/ncskW3macQkSmSsx3dNBUOX76ygKaP9oYuzwGfpzvMhJfz8ALYCwPOr9C
QTrMJIXtgyXNqtAD+dRyDMVMQmKzxBPvpuyEoaA530gDOAT8DQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAxxHzbSwj3TgrCe/wwf8kWbrkpDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZGE2MzZlOGMtNGQ4OS0z
YjNiLTk3MWQtZDliMjEyZGUwZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcclMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKZv0d2hK2U5yTAZbCaBY0ldztroSYAp57l8zZZS9CpZ9Suu+cbNIdgj
0taezKAzY4a2w6KpzPpvTcLQWIXHAgrra+6ISquW722SKl2JGK7zJtEz/cPFLBKK
K5aWaoVX9bI5mmOZmBO0MrR3Tj3YdmFYua7St67ieo9dSAT5H6ajgXo8QIWDH57B
9wYqbKOZeTnKtsPM/E+3gnhwt744Odn34c6geZ9b/AGs4VKKmApFIttm9816I9Id
ocqOAwhXkpSrl/63hyVZ6lbrcoBOreDpmWLmqJFz8B5g+coFoQ00EWFn4aTQsUqF
avyYhWvbVHMWCxBETQwzASjPvHBw9Bw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:31 2026 by rpki-client